CWE-787 · Out-of-bounds Write (page 43)
Page 43 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23234 | Medium | 6.7 | 2024-03-08 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6… |
CVE-2024-23226 | High | 8.8 | 2024-03-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10… |
CVE-2023-48725 | High | 7.2 | 2024-03-07 | A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially cr… |
CVE-2023-51395 | High | 8.8 | 2024-03-07 | The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticat… |
CVE-2024-2174 | High | 8.8 | 2024-03-06 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-2173 | High | 8.8 | 2024-03-06 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML… |
CVE-2023-52596 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix out of bounds access for empty sysctl registers When registering tables to th… |
CVE-2024-1220 | High | 8.2 | 2024-03-06 | A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit… |
CVE-2024-23296 | High | 7.8 | 2024-03-05 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey… |
CVE-2024-23225 | High | 7.8 | 2024-03-05 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey… |
CVE-2024-22254 | High | 7.9 | 2024-03-05 | VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading… |
CVE-2023-45591 | High | 7.5 | 2024-03-05 | A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger… |
CVE-2024-20832 | Medium | 6.4 | 2024-03-05 | Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2024-20831 | Medium | 6.4 | 2024-03-05 | Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2023-52432 | Medium | 5.9 | 2024-03-05 | Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2023-43549 | High | 8.4 | 2024-03-04 | Memory corruption while processing TPC target power table in FTM TPC. |
CVE-2023-43548 | High | 7.3 | 2024-03-04 | Memory corruption while parsing qcp clip with invalid chunk data size. |
CVE-2023-43540 | High | 8.4 | 2024-03-04 | Memory corruption while processing the IOCTL FM HCI WRITE request. |
CVE-2023-33066 | High | 8.4 | 2024-03-04 | Memory corruption in Audio while processing RT proxy port register driver. |
CVE-2023-28582 | Critical | 9.8 | 2024-03-04 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
CVE-2023-28578 | Critical | 9.3 | 2024-03-04 | Memory corruption in Core Services while executing the command for removing a single event listener. |
CVE-2024-20033 | Medium | 4.4 | 2024-03-04 | In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2024-20031 | Medium | 6.7 | 2024-03-04 | In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2024-20029 | High | 8.4 | 2024-03-04 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execut… |
CVE-2024-20028 | Medium | 6.6 | 2024-03-04 | In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2024-20027 | High | 7.9 | 2024-03-04 | In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20024 | Medium | 6.0 | 2024-03-04 | In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20023 | Medium | 6.7 | 2024-03-04 | In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20020 | Medium | 4.4 | 2024-03-04 | In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2024-20018 | Critical | 9.8 | 2024-03-04 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional e… |
CVE-2024-20017 | Critical | 9.8 | 2024-03-04 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional executio… |
CVE-2023-52531 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'e… |
CVE-2023-52512 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: wpcm450: fix out of bounds write Write into 'pctrl->gpio_bank' happens… |
CVE-2022-48627 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy oc… |
CVE-2023-7244 | Critical | 9.8 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their… |
CVE-2023-7243 | Critical | 9.8 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while a… |
CVE-2024-27570 | High | 7.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows… |
CVE-2023-52497 | High | 7.1 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer fo… |
CVE-2024-25578 | High | 7.8 | 2024-03-01 | MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result in memory corru… |
CVE-2024-22100 | High | 7.8 | 2024-03-01 | MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker t… |
CVE-2024-1941 | High | 7.8 | 2024-03-01 | Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code… |
CVE-2024-24246 | Medium | 5.5 | 2024-02-29 | Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h. |
CVE-2023-52482 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative ret… |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2021-46931 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5e_tx_reporte… |
CVE-2024-23605 | High | 8.8 | 2024-02-26 | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can… |
CVE-2024-23496 | High | 8.8 | 2024-02-26 | A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file… |
CVE-2024-21836 | High | 8.8 | 2024-02-26 | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf fil… |
CVE-2024-21825 | High | 8.8 | 2024-02-26 | A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A spe… |
CVE-2024-21802 | High | 8.8 | 2024-02-26 | A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can… |
CVE-2024-26586 | High | 7.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net d… |
CVE-2024-23127 | High | 7.8 | 2024-02-22 | A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-… |
CVE-2024-23126 | High | 7.8 | 2024-02-22 | A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leve… |
CVE-2024-23125 | High | 7.8 | 2024-02-22 | A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can le… |
CVE-2024-23124 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor ma… |
CVE-2024-23123 | High | 7.8 | 2024-02-22 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A m… |
CVE-2024-23122 | High | 7.8 | 2024-02-22 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may le… |
CVE-2024-23121 | High | 7.8 | 2024-02-22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-25423 | High | 7.0 | 2024-02-22 | An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4d_base.xdl64 file. |
CVE-2024-23120 | High | 7.8 | 2024-02-22 | A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vuln… |
CVE-2024-0446 | High | 7.8 | 2024-02-22 | A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Writ… |
CVE-2023-42873 | High | 7.8 | 2024-02-21 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2… |
CVE-2023-42848 | High | 7.8 | 2024-02-21 | The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1… |
CVE-2024-1669 | High | 8.8 | 2024-02-21 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… |
CVE-2024-23606 | Critical | 9.8 | 2024-02-20 | An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A special… |
CVE-2024-23305 | Critical | 9.8 | 2024-02-20 | An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)… |
CVE-2024-21795 | Critical | 9.8 | 2024-02-20 | A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A speci… |
CVE-2023-45318 | Critical | 10.0 | 2024-02-20 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network p… |
CVE-2024-1557 | High | 8.1 | 2024-02-20 | Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2024-26328 | Medium | 6.0 | 2024-02-19 | An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with h… |
CVE-2024-26327 | Medium | 5.3 | 2024-02-19 | An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than Tota… |
CVE-2023-5779 | Medium | 4.4 | 2024-02-18 | can: out of bounds in remove_rx_filter function |
CVE-2023-6749 | High | 8.0 | 2024-02-18 | Unchecked length coming from user input in settings shell |
CVE-2023-52370 | Critical | 9.8 | 2024-02-18 | Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access. |
CVE-2023-52369 | Critical | 9.1 | 2024-02-18 | Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity. |
CVE-2024-0023 | High | 7.8 | 2024-02-16 | In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… |
CVE-2024-0018 | High | 7.8 | 2024-02-16 | In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio… |
CVE-2024-0040 | High | 7.5 | 2024-02-16 | In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with n… |
CVE-2024-0033 | High | 7.8 | 2024-02-16 | In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with… |
CVE-2024-0031 | Critical | 9.8 | 2024-02-16 | In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote c… |
CVE-2023-40110 | High | 7.8 | 2024-02-15 | In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege… |
CVE-2024-20739 | High | 7.8 | 2024-02-15 | Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-20728 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-20727 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-20726 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-20744 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont… |
CVE-2024-20743 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont… |
CVE-2024-20741 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition vulnerability that could result in arbitrary code execution in th… |
CVE-2024-20740 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont… |
CVE-2022-23092 | High | 8.8 | 2024-02-15 | The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that t… |
CVE-2022-23087 | High | 8.8 | 2024-02-15 | The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP che… |
CVE-2022-23086 | High | 7.8 | 2024-02-15 | Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed size heade… |
CVE-2022-23085 | High | 8.2 | 2024-02-15 | A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bounds checking could lead to kernel memo… |
CVE-2023-48229 | High | 7.0 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 ra… |
CVE-2024-23982 | High | 7.5 | 2024-02-14 | When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to t… |
CVE-2023-34351 | High | 7.5 | 2024-02-14 | Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network acce… |
CVE-2024-24924 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an… |
CVE-2024-24922 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an… |
CVE-2024-24921 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing s… |
CVE-2024-24920 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an… |